Many larger companies, and some medium sized companies, have a focused CISO with a great IT team who have all worked hard to establish a data security and risk management program.  Perhaps the CISO and IT team have spent hours collecting data, building spreadsheets and sharing evidence with ...

Thinking about cybersecurity is a full time, 365 day-a-year job at Ostendio but for many it comes to mind most during October when the National Cybersecurity Alliance partners with companies and government agencies to promote cybersecurity at home and in the workplace.  Ostendio is proud to be a ...

If you’ve recently built a data security and risk management program and passed a security audit, you’ve accomplished more than many organizations.  But cyber criminals don’t rest, even if you have a verifiable cybersecurity plan in place, bad actors are constantly innovating and finding new ways ...

The first step in any process is often the hardest. Realizing that you need to take action is just the beginning, deciding what action to take is another matter. Some companies build their cybersecurity into their organization right from the start, others realize later down the line that they need ...

As a CISO, you’ve spent time deciding on the best platform to suit your data security and risk management needs and you are ready for the implementation. But what happens when you need to train your staff or what happens if you have a question? After the sales team has handed off your account does ...

When it is time to prepare for your first audit you might be filled with dread.  How are you going to get through the audit? Will your employees or IT team have enough time to devote to this important process? Who should take the lead when your team is already busy with the recent technology ...

It feels great to get to the point where you have built a cybersecurity program for your business. As a CISO you got the executive buy-in, everyone has backed the need for a data security and risk management program and you feel a sense of accomplishment. You’ve spent time involving the whole ...

Even before the COVID-19 pandemic took hold, too many organizations were not looking at a broad enough approach to cybersecurity as they evaluated their operating models.  As we highlighted in our blog post about the recent Twitter breach, an IT-centric security approach is never sufficient. For ...

We might not be surprised when we read about another data breach but it does turn heads when it is a well-known brand like Twitter.  Recent reports about a significant breach at Twitter were stunning. High profile accounts were hacked in an attempt to solicit bitcoin. Florida police have now ...

The typical company significantly under invests in cyber security, a situation that is likely to be exacerbated as companies look to cut expenses during the current pandemic. Even worse, investments that are made are often made in the wrong place meaning the cybersecurity budget allocated is not ...

Security and Risk Management can be complicated. Predicting what might happen to your business and preparing to protect and mitigate against those threats or risks is challenging.  COVID-19 caught most of us off-guard and sent our security and risk management teams into overdrive with an increase ...

We have learnt a lot in the last year since we launched the successful MyVCM CrossWalk Assessment feature, an addition to the industry leading Ostendio MyVCM integrated risk management platform.  CrossWalk Assessment is a way to help companies, and their auditors, avoid duplication and reduce time ...

The California Consumer Privacy Act (CCPA) went into effect on January 1st 2020 but there are stages to its enforcement and we are about to hit another milestone.  July 1st 2020 is when the CCPA enforcement phase begins which means that the Attorney General of California will be able to take action ...

It is hard to believe it has been a year since we launched MyVCM CrossWalk Assessments. This new feature radically changed the way companies approached their data security programs and many Ostendio customers are enjoying the benefits that the feature offers. In the last year, 92 organizations ...

Security certifications are a must for vendors and technology firms. Many organizations choose SOC 2 as a way of demonstrating effective risk management practices and meeting regulatory requirements. Holding a SOC 2 shows that your organization takes security seriously and now, more than ever, ...